Compose new images using multiple reference images with Nano Banana Pro. Use up to 14 reference images to: - Create group compositions - Transfer styles between images - Maintain character consistency across scenes - Combine objects from different images Limits: - Up to 6 images of objects for hi...
AI agents use nanobanana_compose_images to create or update resources in Nano Banana MCP Server — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Nano Banana MCP Server environment.
This tool creates new visual content by composing and synthesizing multiple input images. While the output images are digital artifacts (not inherently destructive or irreversible in the way data deletion would be), the tool is fundamentally generative and creative rather than read-only. It modifies/creates new data artifacts. It does not execute arbitrary code, delete data, or involve financial transactions.
From the tool's definition nanobanana_compose_images creates new images by combining multiple reference images. The description explicitly states 'Compose new images' and enables 'Create group compositions, Transfer styles between images, Maintain character consistency across scenes,…
Attacks that exploit this kind of access
Compose new images using multiple reference images with Nano Banana Pro. Use up to 14 reference images to: - Create group compositions - Transfer styles between images - Maintain character consistency across scenes - Combine objects from different images Limits: - Up to 6 images of objects for high-fidelity inclusion - Up to 5 images of humans for character consistency - Total maximum: 14 images Args: - prompt (string, required): Description of how to compose the images - images (array, required): Array of image objects with: * base64 (string): Base64-encoded image data * mime_type (string): Image MIME type - model (string): Must be Nano Banana Pro (gemini-3-pro-image-preview) - aspect_ratio (string): Output aspect ratio - resolution (string): Output resolution (1K, 2K, 4K) Returns: - success (boolean): Whether composition succeeded - imageData (string): Base64-encoded composed image - mimeType (string): Image MIME type - text (string): Any accompanying text - error (string): Error message if failed Examples: -. It is categorised as a Write tool in the Nano Banana MCP Server MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.
Register the Nano Banana MCP Server MCP server in PolicyLayer and add a rule for nanobanana_compose_images: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Nano Banana MCP Server. Nothing to install.
nanobanana_compose_images is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.
Yes. Add a rate_limit block to the nanobanana_compose_images rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.
Set action: deny in the PolicyLayer policy for nanobanana_compose_images. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.
nanobanana_compose_images is provided by the Nano Banana MCP Server MCP server (mikeroussell/nano-banana-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.
Every MCP server has a record like this.
Type a name, get the same breakdown: verified identity, auth posture, risk grade, capabilities, recommended policy.
Teams ship this data inside their own products. See what a licence covers →